Is postAPI safe?
postAPI sends every API test request, including custom headers and auth tokens, through a relay server at 49.235.118.199 over plain HTTP.
When you send a request from the tool, the extension forwards it to a hardcoded third-party server rather than calling the target directly. The target URL, any headers you enter (such as authorization tokens), the request body and uploaded files go to that server, which makes the real request and returns the response. The connection uses unencrypted HTTP, so the traffic is also visible to network observers.
Part of this rating comes from analysis signals we haven't published as detailed findings yet.
AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.
Publishers can request a review.
Where it sends data
Destinations our analysis observed postAPI contacting. Sending data somewhere is not a finding on its own - an extension that syncs your settings has to talk to its own server - but it is where your data can go, and who else it goes to.
- 49.235.118.199:3001
postAPI sends data to 49.235.118.199:3001. No other extension we have analysed sends data here.